This script is Copyright (C) 2017 Tenable Network Security, Inc.
The remote FreeBSD host is missing one or more security-related
Django blog :
In older versions, HTML autoescaping was disabled in a portion of the
template for the technical 500 debug page. Given the right
circumstances, this allowed a cross-site scripting attack. This
vulnerability shouldn't affect most production sites since you
shouldn't run with DEBUG = True (which makes this page accessible) in
your production settings.
See also :
Update the affected packages.
Risk factor :
Medium / CVSS Base Score : 4.3